CVE-2025-51531

A reflected cross-site scripting XSS vulnerability in Sage DPW 202412004 and earlier allows attackers to execute arbitrary JavaScript in the context of a victim's browser via injecting a crafted payload into the tabfields parameter at /dpw/scripts/cgiip.exe/WService. The vendor has stated that th...

Sage DPW 安全漏洞

Sage DPW is an HR system from Sage UK. A security vulnerability exists in Sage DPW version v2024.12.003, which stems from the tabfields parameter not being cleaned up could lead to a reflective cross-site scripting attack...